Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
File: 1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json)
Hash identifier: R43bTLSnMulHXTqpVopOkoSLn7j+lOmnZuDOW4oI3pc=
Subject key identifier: 60:FE:8B:21:CB:08:93:94:7B:B7:37:67:29:E7:E8:46:18:47:50:09
Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
Certificate issuer: /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Certificate serial: 0197B632BD6A8402244D8ECCC30F8FFB75FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
Manifest number: 1573
Signing time: Sat 28 Jun 2025 11:01:07 +0000
Manifest this update: Sat 28 Jun 2025 11:01:07 +0000
Manifest next update: Sun 29 Jun 2025 11:01:07 +0000
Files and hashes: 1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: uOYV+q89NMmLrdm2eRv2X1Q+b0E+xe1iqEdZLyH/FCM=)
2: DBBkmAjtiZvJk178YbVOfqGzI3Y.roa (hash: 8eJVP5XAdO67of9omWg+boW49giOURgUcnG9ZjC9lgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:bd:6a:84:02:24:4d:8e:cc:c3:0f:8f:fb:75:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Validity
Not Before: Jun 28 11:01:07 2025 GMT
Not After : Jun 29 11:01:07 2025 GMT
Subject: CN=60fe8b21cb0893947bb7376729e7e84618475009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:44:70:b5:2d:05:5c:d9:f0:30:f3:5f:ec:
75:36:d2:e8:75:7e:f8:bd:55:1e:f6:17:57:0e:0d:
43:82:3b:a6:3b:2f:9e:ca:43:bf:1e:2d:8c:a3:f2:
02:1f:bf:e0:63:4d:ba:b2:01:c9:54:bc:27:5d:1d:
c7:94:54:06:68:e3:6a:c7:fc:08:6e:2f:78:89:e8:
92:66:39:e2:77:bd:ff:8b:57:35:b5:5a:01:08:9e:
db:70:02:8e:35:a7:63:a8:1a:92:f9:52:37:28:04:
6d:a9:86:b3:9b:74:95:26:47:64:f0:fb:87:2a:4b:
a7:fe:ae:82:11:43:fc:a3:4a:6e:15:4d:35:4d:93:
3a:f6:71:00:41:66:f1:d8:d5:fe:fe:3a:11:4c:56:
d5:39:bd:c0:ea:fb:d4:3e:82:3e:12:70:e4:60:e8:
07:9c:26:9a:de:d3:c3:6e:2a:eb:8d:80:92:45:d3:
00:40:c9:7e:6c:7e:a9:cf:91:d9:2f:6d:cd:e9:2f:
c7:72:02:bf:63:c4:5b:e5:35:b8:1c:bb:de:01:49:
e4:7f:ff:40:70:57:68:c9:e1:1d:a0:0f:82:c5:49:
b3:a5:43:c5:cb:5a:02:5e:20:05:92:32:50:b3:0d:
9b:65:e3:6b:1f:cb:81:8b:e6:b6:2b:f4:c0:4d:d9:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FE:8B:21:CB:08:93:94:7B:B7:37:67:29:E7:E8:46:18:47:50:09
X509v3 Authority Key Identifier:
keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:5d:ec:f7:39:1e:21:fa:a3:69:41:9a:e6:18:eb:85:96:f8:
39:2b:41:4e:35:d7:e8:9a:65:3f:c6:69:00:cc:33:81:0d:9b:
df:c9:7a:b6:f9:33:22:95:d3:2e:a6:b3:fb:63:63:a3:f8:29:
e5:5d:6a:3e:9b:6a:1f:cc:b1:9b:bd:1a:c5:77:a6:ea:64:54:
f0:ec:2c:36:ae:b3:15:65:35:19:2c:f5:50:02:1f:18:1d:61:
fa:67:e0:d3:4c:21:43:c2:2d:b1:4c:bb:80:5e:ed:9a:99:6a:
4d:4a:90:44:02:b0:90:c5:4f:44:a3:5a:02:6b:e9:eb:e2:78:
24:a8:39:43:e6:ef:63:d2:1c:06:2b:fb:3d:42:96:68:3d:0a:
77:55:a1:63:18:f5:b6:ab:cf:c2:68:d3:1e:4a:47:a1:78:ca:
63:1d:04:3b:67:b0:09:80:50:88:3c:44:6e:30:92:f7:45:fd:
69:4c:aa:60:11:d9:21:5b:b5:9e:37:f7:1f:5b:a0:7b:5e:c1:
28:5c:e2:d3:66:0d:9c:b1:ff:bb:8a:96:5e:7e:fa:14:22:ae:
6b:0e:f8:57:9f:81:b7:cf:8a:2e:ff:56:8e:be:f0:8b:33:b0:
d8:ca:fb:43:8b:c8:b7:35:be:32:28:e0:c2:23:24:fe:27:fb:
0b:9a:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:19 2025 by rpki-client